JP2004062511A - Cell phone with authentication process function and authentication system thereof - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an authentication system for easy identification and a cell phone for use therewith. <P>SOLUTION: The cell phone has a means for storing a user's sign data in advance, a means for inputting the user's sign and converting it into electronic data, and a means for collating the stored sign data with the input sign data converted into the electronic data. The center server of the cell phone has a means for storing user identification information including the phone number of the cell phone; a communication means for communication between card affiliates' terminals and a card company's server; a means for receiving the user identification data and account data from the affiliates' terminals; a means for sending the account data to the cell phone after verifying the user identification data; a means for receiving the result of sign collation performed at the cell phone; a means for sending the account data to the credit card company's server; a means for receiving credit data from the card company's server; and a means for sending the credit data to the affiliates' terminals and the cell phone. <P>COPYRIGHT: (C)2004,JPO

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to an authentication system in which various authentication functions, such as a handwritten signature (signature), a fingerprint, an iris, an electronic seal, a password, and the like, are incorporated in a mobile phone, and the mobile phone.
[0002]
[Prior art]
For example, when using a credit card, conventionally, the merchant terminal reads the credit card information, transmits the information from the merchant terminal to a server that performs credit card credit via a communication network, and receives the credit result. By doing so, credit card settlement was performed. At the same time, the merchant has been asking the credit card user for a handwritten signature and visually checking the card against the signature on the back of the card for identity verification.
[0003]
Furthermore, it has become popular to read biometric information such as a fingerprint or an iris and perform identity verification in various places for security.
[0004]
[Problems to be solved by the invention]
However, the conventional identity verification using a handwritten signature relies exclusively on visual confirmation, and in many cases, it is not so strictly confirmed, and there is a question about the effectiveness of the identity verification.
In addition, the authentication system for personal identification using biometric information such as fingerprints and irises has high reliability as personal information, but requires a dedicated recognition device equipped with a biometric information reader and recognition software installed with recognition software. There is the inconvenience that identity verification cannot be performed unless the location is provided.
[0005]
In view of the above situation, an object of the present invention is to provide an authentication system which can increase the reliability of personal identification using a handwritten signature and can be easily executed, and a mobile phone used for the authentication system.
Another object of the present invention is to provide an authentication system for personal identification based on biological information such as a fingerprint and an iris, which can execute the personal identification even in a place without a dedicated recognition device or the like. I do.
[0006]
[Means for Solving the Problems]
In order to achieve the above object, the present invention incorporates a function for an authentication system into a mobile phone. At present, the penetration rate of mobile phones is high, and by incorporating such functions in mobile phones, it becomes possible to significantly reduce the location and time constraints in various application situations where authentication by personal identification is required. .
The following is a program for realizing each function of the mobile phone with the authentication processing function, the authentication system using the same, and the server that executes the mobile phone and the authentication system according to the present invention.
[0007]
(1) A mobile phone according to claim 1, wherein a signature data storage unit for storing user's signature data in advance;
Sign input means for inputting a user's signature and converting the signature into electronic data, and signature authentication means for collating the previously stored signature data with the input and converted electronic data.
[0008]
(2) The mobile phone according to claim 2 further comprises a communication unit for performing short-distance wireless communication with a credit card member store terminal in the mobile phone according to claim 1.
[0009]
(3) A mobile phone according to a third aspect is the mobile phone according to the second aspect, further comprising a payment frame data storage unit for storing credit card payment frame data.
[0010]
(4) An authentication system according to a fourth aspect of the present invention is the authentication system having a center server that controls a mobile phone according to any one of the first to third aspects, wherein the center server comprises:
Means for storing user identification data including a telephone number of the mobile phone;
Communication means for transmitting information between a credit card member store terminal and a credit card company server;
Means for receiving, from the member store terminal, user identification data including a telephone number and statement data including a credit card number by the communication means,
Means for referring to and confirming the stored user identification data based on the received user identification data, and then transmitting the detailed data to the mobile phone;
Means for receiving, from the mobile phone, signed authenticated data that is a result of the collation performed by the signature authentication unit in the mobile phone that has received the detailed data,
Means for transmitting the statement data to the credit card company server after receiving the signature authenticated data,
Means for receiving, from the credit card company server, credited data that is a result of executing a credit process in the credit card company server that has received the detailed data,
Means for transmitting the credited data to the member store terminal and the mobile phone.
[0011]
(5) An authentication system according to a fifth aspect of the present invention is the authentication system having a center server that controls a mobile phone according to the third aspect, wherein the center server comprises:
Means for storing user identification data including a telephone number of the mobile phone;
Communication means for transmitting information between a credit card member store terminal and a credit card company server;
Means for receiving, from the member store terminal, user identification data including a telephone number and statement data including a credit card number by the communication means,
Means for referring to and confirming the stored user identification data based on the received user identification data, and then transmitting the statement data to the credit card company server;
Means for receiving, from the credit card company server, credited data that is a result of executing a credit process in the credit card company server that has received the detailed data,
Means for transmitting the credited data to the member store terminal;
Means for receiving, from the member store terminal, sign-authenticated data and the credit card settlement frame data, which are the results of the collation performed by the sign authentication means on the mobile phone received by the member store terminal from the mobile phone. .
[0012]
(6) In the authentication system according to claim 6, in the authentication system according to claim 5, the mobile phone performs the short-range wireless communication of the detail data from the member store terminal that has received the credited data. After receiving the data by the communication means, the verification by the signature authentication means is performed, and the result of the signature verification and the credit card payment frame data updated based on the statement data are transmitted to the member store terminal. I do.
[0013]
(7) In the authentication system according to claim 7, in the authentication system according to any one of claims 4 to 6, the center server further includes a signature data storage unit that stores signature data of the user in advance.
[0014]
(8) The program according to claim 8 is provided for a mobile phone,
A function of storing user's signature data in advance,
A function of inputting a user's signature and converting the signature into electronic data;
A signature authentication function for collating the previously stored signature data with the input and converted electronic data is realized.
[0015]
(9) The program according to claim 9 further realizes a function of causing a mobile phone to perform short-range wireless communication with a credit card member store terminal.
[0016]
(10) The program according to claim 10 further causes the mobile phone to realize a function of storing credit card payment frame data.
[0017]
(11) A program according to claim 11, wherein the authentication system has a center server that controls a mobile phone according to any one of claims 1 to 3,
A function of storing user identification data including a telephone number of the mobile phone;
A communication function for transmitting information between a credit card member store terminal and a credit card company server;
A function of receiving, from the member store terminal, user identification data including a telephone number and detailed data including a credit card number by the communication function,
After referring to and confirming the stored user identification data based on the received user identification data, a function of transmitting the detailed data to the mobile phone,
A function of receiving, from the mobile phone, signature-authenticated data that is a result of the collation performed by the signature authentication unit in the mobile phone that has received the detailed data,
A function of transmitting the statement data to the credit card company server after receiving the signature authenticated data,
A function of receiving, from the credit card company server, credited data that is a result of executing a credit process in the credit card company server that has received the detailed data,
Transmitting the credited data to the member store terminal and the mobile phone.
[0018]
(12) A program according to claim 12, wherein in the authentication system having a center server that controls a mobile phone according to claim 3, the center server
A function of storing user identification data including a telephone number of the mobile phone;
A communication function for transmitting information between a credit card member store terminal and a credit card company server;
A function of receiving, from the member store terminal, user identification data including a telephone number and detailed data including a credit card number by the communication function,
After referring to and confirming the stored user identification data based on the received user identification data, a function of transmitting the statement data to the credit card company server,
A function of receiving, from the credit card company server, credited data that is a result of executing a credit process in the credit card company server that has received the detailed data,
A function of transmitting the credited data to the member store terminal;
The member store terminal realizes a function of receiving, from the member store terminal, sign-authenticated data and the credit card payment frame data, which are the results of the collation performed by the signature authentication unit on the mobile phone received from the mobile phone. Let it.
[0019]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, embodiments of the present invention will be described with reference to examples and drawings.
FIG. 1 is a schematic configuration diagram schematically showing an embodiment of an authentication system for personal identification according to the present invention. Note that arrows in S102 to S108 indicate data flows corresponding to the processing flow described in FIG.
In the present system, the mobile phone 20 and the center server 10 of the mobile phone company that manages the mobile phone 20 operate in conjunction with the existing credit card member store terminal 30 and the credit card company server 40 to operate the credit card at the member store. Credit and settlement including identification of the card user can be executed. The "credit card terminal device" includes a device installed in a taxi for taxi fare settlement.
[0020]
Although the mobile phone center server 10, mobile phone 20, member store terminal 30, and credit card company server 40 shown in FIG. 1 can basically use existing hardware devices, they execute the authentication system according to the present invention. Software for realizing the added functions is newly introduced. Although FIG. 1 mainly shows only the components related to the authentication system according to the present invention for each hardware device, it naturally has the functions that it should have.
[0021]
In the embodiment shown in FIG. 1, a handwritten signature is used as a method for verifying the identity, so that the mobile phone 20 includes a handwritten signature input device. For example, the screen as the display device of the mobile phone 20 is also an input device, and when a signature is written on the screen using an electronic pen or the like, the signature image data is captured as electronic data, and the signature is recognized by signature recognition software. Recognize the shape. As such an input device, a tablet or digitizer technology conventionally known in the graphic field can be used. In tablets and digitizers, for example, the position of the cordless pen is detected by electromagnetic coupling between a coil or the like provided on the flat detection surface side and a coil or the like built in the cordless pen, and a figure drawn by the cordless pen Can be input as electronic data.
[0022]
The mobile phone 20 is positioned as one of information processing terminal devices that can access a communication network. The storage unit 22 stores a program for executing a function related to the authentication system according to the present invention, and is implemented by an appropriate main storage device or an auxiliary storage device that stores data related to the authentication system according to the present invention. The control unit 21 is realized by a central processing unit (CPU) that executes a stored program. The control unit 21 controls writing and reading of data to and from the storage unit 22, and also includes a communication unit 23 having a communication function of the mobile phone 20, a display unit 24 such as a liquid crystal screen, a sign input unit 25 which is a handwritten signature input device, And a button input unit 26 which is a normal input device such as a push button. The storage unit 22 stores handwritten signature electronic data 22a of a mobile phone user (also a credit card user). This is stored in advance before using the authentication system. Further, the storage unit 22 generally stores telephone number data 22b of the mobile phone. The settlement frame data 22c in the storage unit 22 is used in a second embodiment described later. The control unit 21 includes a signature authentication processing function 21a that determines whether the handwritten signature of the user input from the signature input unit 25 matches the handwritten signature electronic data 22a stored in the storage unit 22. The signature authentication processing function 21a is specifically realized by an appropriate signature authentication program, and in a preferred embodiment, a dedicated signature authentication module storing the signature authentication program is incorporated in a mobile phone. In addition, it is preferable that the communication unit 23 has a short-range wireless communication function such as Bluetooth and infrared communication separately from the communication function as a mobile phone. As will be described later, this is for performing short-range wireless communication with the member store terminal 30.
[0023]
The mobile phone center server 10 is implemented by an appropriate computer including a central processing unit (CPU), a storage device, an input / output device, and a communication device. The control unit 11 is realized by a CPU that executes a stored program. The storage unit 12 realized by an appropriate storage device stores the handwritten signature electronic data 12a of the mobile phone user in advance. This is the same data as the signature data 22a stored in the mobile phone 20. By registering and storing the signature data 12a in the center server 10, for example, when the mobile phone user switches to a new mobile phone, or when the signature data 22a stored in the mobile phone 20 is lost, The signature data 12a stored in the center server 10 can be transmitted to a mobile phone and stored in the mobile phone. In other words, the mobile phone user does not need to register the sign data again. In addition, it stores user identification data (name, address, charge account, etc.) including the telephone number data 12a of the mobile phone user. Furthermore, the settlement frame data 22c of the storage unit 12 is used in a second embodiment described later. Further, a communication unit 13 is provided which has a function of communicating with the mobile phone 20, the member store terminal 30, and the credit card company server 40 via an appropriate network. The control unit 11 controls each of these functions.
[0024]
The member store terminal 30 is implemented by an appropriate computer including a central processing unit (CPU), a storage device, an input / output device, and a communication device. The control unit 31 is realized by a CPU that executes a stored program. The storage unit 32 realized by an appropriate storage device stores detailed data 32a relating to credit card use by a card user. The statement data is detailed information of the credit card use of the card user, and includes a card number, a use date, an item ordered or purchased, a charge, a total charge, and the like. The member store terminal 30 includes a reader (not shown) such as a magnetic recording medium or an IC chip provided on a credit card. Thereby, the member store terminal 30 reads the credit card information (such as the card number) presented by the card user. In addition, as a communication function of the communication unit 33, it is preferable to provide a short-range wireless communication function such as Bluetooth and infrared communication separately from a function of communicating with the mobile phone center server 10 via an appropriate communication network. is there. This is for performing short-range wireless communication with the mobile phone 20.
[0025]
In the conventional system, the member store terminal 30 transmits the card information data to the credit card company server 40 online together with the statement data. The control unit 41 of the credit card company server 40 executes the credit by referring to the database held by the credit processing function 41a, that is, the data storage unit 42, and returns the credit result data to the member store terminal 30. If the credit result is positive, the member store completes the credit card settlement with the card user. Then, the affiliated store collects the individual statement data every month, and bills the credit card company based on the data. The credit card company pays the merchant on behalf of the card user and charges the card user with the fee at a later date.
[0026]
On the other hand, in the authentication system of the present invention, card information data for credit processing is transmitted from the member store terminal 30 to the credit card company server 40 via the mobile phone center server 10, and the credit result data is A reply is sent from the card company 40 to the member store terminal 30 via the mobile phone center server 10. It should be noted that billing and payment to the credit card company by the member stores every month are performed as usual.
[0027]
The authentication system of the present invention differs from the conventional system in the procedure in which the card user performs identity verification by handwritten signature. The card information is input to the member store terminal 30 by the credit card reader, and the name and the mobile phone number presented by the card user are input by an input device such as an appropriate keyboard. The card user name and the mobile phone number are user identification data for identifying the card user (also a mobile phone user). The member store terminal 30 transmits the card user name data and the mobile phone number data to the mobile phone center server 10 in addition to the card information data and the statement data for credit processing. If the card user confirms that the card user is an authorized cell phone user by referring to the storage unit 12 based on the name data and the cell phone number data, the cell phone center server 10 To transmit handwritten signature input request data to. Handwritten signature input request data is received by the mobile phone 20 and displayed on the display unit 24 thereof. The handwritten signature input request data includes detailed data and is displayed at the same time. The card user inputs a handwritten signature into the signature input unit 25 after confirming that there is no mistake in the usage fee or the like of the displayed detailed data.
[0028]
The control unit 21 of the mobile phone 20 recognizes, as electronic data, the handwritten signature input to the signature input unit 25 by the signature authentication processing function 21a, compares it with the signature data 22a stored in the storage unit 22, and determines whether the signature matches. Determine whether or not. In this determination processing, a known handwritten character recognition and collation technique is used, and if it is confirmed that there is a matching degree equal to or greater than a certain threshold value, it is determined that the input handwritten signature matches the stored signature data. That is, an authentication result is obtained that the card user who has performed the handwritten signature is himself / herself. The authentication result data is transmitted from the mobile phone 20 to the mobile phone center 10, and the mobile phone center 10 receives the data. The authentication result data is transmitted to the credit card company server 40 together with card information data and detailed data for credit processing, where the credit processing is performed. Details of the authentication processing flow in the credit card settlement will be described later with reference to FIG. As described above, in the authentication system of the present invention, there is no need for the card user to make a handwritten signature on the document, and there is no need for the person in charge of the member store to visually check the handwritten signature.
[0029]
FIG. 2 is a flowchart showing a processing flow in the embodiment of FIG. Note that, in FIG. 2, the portion enclosed by () indicates that this is a human action and not a system process. Hereinafter, description will be made in order.
Step S101: A mobile phone user (credit card user) who has eaten, shopped, or the like at a member store offers a credit card settlement for payment and presents a mobile phone number and name. The mobile phone number and name are user identification data for identifying a user. The member store terminal 30 accepts data input of a user name and a mobile phone number, and reads card information data such as a credit card number. The member store terminal 30 is further input with the statement data and calculates the total amount. The calculated total amount is also included in the detailed data. In a POS system or the like, detailed data is automatically input from a POS terminal to a member store terminal. Thus, the user identification data, the card information data, and the statement data are input to the member store terminal 30. The member store terminal 30 stores these data in its storage unit 32 as needed.
[0030]
Step S102: The member store terminal 30 transmits the user identification data and the statement data to the center server 10.
[0031]
Step S103: The center server 10 receives the user identification data and the detail data, and refers to the telephone number data in the storage unit 12a or other personal information as a mobile phone user based on the user identification data, thereby obtaining the information. After confirming that the card user is an authorized mobile phone user, the card data is transmitted to the mobile phone 20 of the user. The detailed data includes a usage record of the user. Also, together with the detailed data, the signature authentication request data for requesting the user to execute the signature authentication is transmitted.
[0032]
Step S104: The mobile phone 20 receives the statement data and the signature authentication request data. The usage record of the user and the total charge included in the detailed data are displayed on the display unit 24 of the mobile phone, and a request message such as “Please perform signature authentication” is also displayed based on the signature authentication request data. 24 is displayed. After confirming the displayed usage record and total fee, the user inputs a handwritten signature to the signature input unit 25 (preferably also used as the display unit 24). The handwritten signature input to the signature input unit 25 is converted into electronic data. Thereafter, the signature authentication processing function 21a compares the input handwritten signature with the signature data 22a stored in the storage unit 22 in advance, and determines whether or not the two match. If it is determined that they match, the user's signature has been authenticated. If authenticated, the mobile phone 20 transmits to the center server 10 sign-authenticated data indicating that the signature has been successfully authenticated.
[0033]
Step S105: The center server 10 receives the signed data. The data is transmitted to the credit card company server 40. This sends the statement data to the credit card company server 40 for credit processing.
Step S106: The credit card company server 40 receives the statement data, refers to the data storage unit 42 based on the statement data, and executes a normal credit process.
[0034]
Step S106: If the credit processing has been successfully completed, the credit card company server 40 transmits to the center server 10 credited data indicating that the credit has been successfully completed.
[0035]
Step S107: The center server 10 receives the credited data. The center server 10 transmits the received credited data to the member store terminal 30. The member store terminal 30 displays a message such as “payment completed” on the display unit 34 based on the content of the received credited data. Thereby, the credit card payment procedure between the member store and the card user is completed.
[0036]
Step S108: On the other hand, the center server 10 also transmits the credited data to the mobile phone 20. The mobile phone 20 displays a message such as “payment completed” on the display unit 24 based on the content of the received credited data. Although not shown in FIG. 1, it is preferable that the mobile phone 20 store and store the detailed data and the credited data transmitted from the center server 10 in the storage unit 22. Thereby, the user can refer to the detailed data at any time.
[0037]
Next, FIG. 3 is a schematic configuration diagram schematically showing another embodiment of an authentication system for personal identification according to the present invention. Note that arrows in S202 to S208 indicate a data flow corresponding to the processing flow described in FIG.
[0038]
In the present embodiment, the hardware elements related to the authentication system, that is, the function realizing means of the present invention provided in each of the mobile phone center server 10, mobile phone 20, member store terminal 30, and credit company server 40 are the same as those in FIG. is there. The settlement frame data 22 stored in the storage unit 22 of the mobile phone 20 is used in the present embodiment. The payment frame data 22 is data that stores available amount data set in advance by the credit card company for the card user. The credit card company sets an appropriate amount of money that can be used according to the transaction situation of the card user. For example, when the payment frame data of 50,000 yen is set (stored) every month, the card user uses the amount of the payment frame data for the purchase or meal in accordance with the method of the embodiment of FIGS. Each time it is used, the payment frame data is updated by deducting the payment. Then, for example, if 30,000 yen is used in one month, the used amount is settled between the card company and the card user at a later date in the same manner as a normal credit card use. On the other hand, the settlement frame data in the storage unit 22 of the mobile phone 20 stores the amount of 20,000 yen at the end of the month, but is restored to the original amount of 50,000 yen at the beginning of the next month, and the amount of 50,000 yen is returned again. The amount is stored.
[0039]
The center server 10 also stores the payment frame data 12c in the storage unit 12 thereof, and is linked with the payment frame data 22c in the storage unit 22 of the mobile phone 20. That is, when communication is performed between the center server 10 and the mobile phone 20, the center server 10 receives the payment frame data 22c from the mobile phone 20 and sets the payment frame data of the center server 10 to match the data. 12c is updated. When the settlement frame data is restored to the original amount at the beginning of the month, the recovery instruction data is transmitted from the center server 10 to the mobile phone 20. Upon receiving the recovery instruction data, the mobile phone 20 recovers the payment frame data 22c in the storage unit 22. In addition, the center server 10 transmits the settlement frame data 12c to the credit card company server 40 every month, and the credit card company server 40 exchanges the payment amount with the individual card users based on the settlement frame data 12c. Perform payment processing.
[0040]
In the embodiment of FIG. 3, unlike the embodiment of FIG. 1, no communication is performed between the center server 10 and the mobile phone 20. This embodiment is executed when the mobile phone 20 is in a state where communication is not possible due to various circumstances.
[0041]
FIG. 4 is a flowchart showing a processing flow in the embodiment of FIG. In FIG. 4, the portion enclosed by () indicates that the action is a human action and is not a system process. Hereinafter, description will be given along the flowchart of FIG. 4 with reference to FIG.
[0042]
Step S201: A mobile phone user (credit card user) who has performed a meal, shopping, or the like at a member store offers a credit card settlement for payment and presents a mobile phone number and name. The mobile phone number and name are user identification data for identifying a user. The member store terminal 30 accepts data input of a user name and a mobile phone number, and reads card information data such as a credit card number. The member store terminal 30 is further input with the statement data and calculates the total amount. The calculated total amount is also included in the detailed data. In a POS system or the like, detailed data is automatically input from a POS terminal to a member store terminal. Thus, the user identification data, the card information data, and the statement data are input to the member store terminal 30. The member store terminal 30 stores these data in its storage unit 32 as needed.
[0043]
Step S202: The member store terminal 30 transmits the user identification data and the statement data to the center server 10.
[0044]
Step S203: The center server 10 receives the user identification data and the statement data, and refers to the telephone number data in the storage unit 12a or other personal information as a mobile phone user based on the user identification data, thereby obtaining the information. Verify that the card user is a legitimate mobile phone user. Thereafter, the user attempts to transmit the statement data to the mobile phone 20 of the user. The steps so far are the same as those in the embodiment shown in FIGS. Here, the center server 10 recognizes that the detailed data cannot be transmitted to the mobile phone 20, that is, the communication with the mobile phone 20 is not possible. For example, this is the case where the mobile phone 20 is not in a communication area. In this case, the center server transmits the statement data to the credit card company server 40.
[0045]
Step S204: The credit card company server 40 receives the statement data, refers to the data storage unit 42 based on the statement data, and executes a normal credit process.
[0046]
Step S205: If the credit processing is completed successfully, the credit card company server 40 transmits credited data indicating that the credit has been successfully completed to the center server 10.
[0047]
Step S206: The center server 10 receives the credited data. The center server 10 transmits the received credited data to the member store terminal 30. Upon receiving the credited data, the member store terminal 30 causes the display unit 34 to display a message such as “Please ask for signature authentication”. As a result, the member store requests signature authentication from the card user. At this time, the member store terminal 30 and the mobile phone 20 transmit and receive the statement data using the short-range wireless communication functions of the respective communication units 33 and 23. The mobile phone 20 displays the received detailed data on the display unit 24, and further displays a message such as "Please perform signature authentication". At this time, it is preferable that the control unit 21 of the mobile phone 20 displays a message requesting signature authentication after confirming that the usage amount of the detailed data is equal to or less than the amount stored in the settlement frame data 22c. This is because if the amount of the payment frame data 22c is less than the usage amount, the payment processing by the present system cannot be continued. After confirming the statement data, the card user inputs a handwritten signature into the signature input unit 25 (preferably also used as the display unit 24) of the mobile phone 20. The handwritten signature input to the signature input unit 25 is converted into electronic data. Thereafter, the signature authentication processing function 21a compares the input handwritten signature with the signature data 22a stored in the storage unit 22 in advance, and determines whether or not the two match. If it is determined that they match, the user's signature has been authenticated.
[0048]
Step S207: If the signature is successfully authenticated, the mobile phone 20 updates the settlement frame data 22c by subtracting the usage amount from the amount stored in the settlement frame data 22c of the storage unit 20. Thereafter, the mobile phone 20 uses the short-range wireless communication function of the communication unit 23 to sign-authenticated data indicating that the signature has been successfully authenticated to the member store terminal 30 and update the settlement frame data 22c. And send.
[0049]
Step S208: When the member store terminal 30 receives the signed authentication data and the payment frame data, the member store terminal 30 displays a message such as "Signature authenticated" on the display unit 34, for example. Thereby, the credit card payment procedure between the member store and the card user is completed. After that, the member store terminal 30 transmits the signed authentication data and the updated payment frame data to the center server 10. The center server 10 updates the payment frame data 12c of the storage unit 12 so as to match the received payment frame data.
[0050]
The embodiment shown in FIGS. 3 and 4 shows an example in which the sign authentication function of the mobile phone 20 can be used even when the mobile phone 20 cannot communicate with the center server 10. That is, the mobile phone can be used as an independent signature authentication device even in a place where radio waves cannot reach.
[0051]
The application example of the authentication system using the mobile phone having the signature input unit and the signature authentication processing function has been described above. Similarly, the input unit of the biometric information such as the fingerprint and the iris and the input biometric information are A similar authentication system can be constructed by a mobile phone having a biometric information authentication processing function of converting the data into data and checking the stored data in advance.
[0052]
【The invention's effect】
In the authentication system using the mobile phone according to the present invention, the mobile phone itself can function as an independent authentication device by including the pre-stored sign data, the signature input means, and the signature verification means. The signature authentication processing function of the mobile phone can collate the stored signature data with the handwritten signature data, and is more reliable than the conventional signature confirmation by human eyes. In addition, it is possible to omit a work using a document and to perform a quick process.
Further, it is preferable that the mobile phone according to the present invention includes a means for transmitting the signature verification result to a computer located at a remote place or a short distance by network communication or wireless communication, whereby the sign input unit and Various authentication systems using a mobile phone having a signature authentication processing function can be realized. The authentication system according to the present invention can be incorporated in various forms into various transaction, contract, and payment systems that require an authentication procedure, that is, an identity verification procedure.
[Brief description of the drawings]
FIG. 1 is a schematic configuration diagram schematically showing an embodiment of an authentication system for personal identification according to the present invention.
FIG. 2 is a flowchart showing a processing flow in the embodiment of FIG. 1;
FIG. 3 is a schematic configuration diagram schematically showing another embodiment of an authentication system for personal identification according to the present invention.
FIG. 4 is a flowchart showing a processing flow in the embodiment of FIG. 3;
[Explanation of symbols]
10 Mobile phone center server
11 Control part
12 Center server storage
12a Signature data
12b Phone number data
12c Settlement frame data
13 Communication unit
20 mobile phones
21 Control unit
21a Signature authentication processing function
22 Mobile phone storage
22a Signature data
22b Phone number data
22c Settlement frame data
23 Communication unit
24 Display
25 Sign input section
26 Button input section
30 Merchant terminal
32 Member store terminal storage unit
32a Detail data
33 Communication unit
34 Display
35 Input section
40 Credit card company server
41 Control unit
41a Credit / settlement data processing function
42 Data storage unit
43 Communication unit

Claims (12)

Signature data storage means for storing user's signature data in advance;
Signature input means for inputting a user's signature and converting the signature into electronic data;
A mobile phone comprising: a signature authentication unit that verifies the previously stored signature data with the input and converted electronic data. The mobile phone according to claim 1, further comprising communication means for performing short-range wireless communication with a credit card member store terminal. The mobile phone according to claim 2, further comprising a payment frame data storage unit that stores credit card payment frame data. An authentication system having a center server that controls a mobile phone according to any one of claims 1 to 3, wherein the center server comprises:
Means for storing user identification data including a telephone number of the mobile phone;
Communication means for transmitting information between a credit card member store terminal and a credit card company server;
Means for receiving, from the member store terminal, user identification data including a telephone number and statement data including a credit card number by the communication means,
Means for referring to and confirming the stored user identification data based on the received user identification data, and then transmitting the detailed data to the mobile phone;
Means for receiving, from the mobile phone, signed authenticated data that is a result of the collation performed by the signature authentication unit in the mobile phone that has received the detailed data,
Means for transmitting the statement data to the credit card company server after receiving the signature authenticated data,
Means for receiving, from the credit card company server, credited data that is a result of executing a credit process in the credit card company server that has received the detailed data,
Means for transmitting the credited data to the member store terminal and the mobile phone. The authentication system according to claim 3, further comprising a center server that controls the mobile phone, wherein the center server comprises:
Means for storing user identification data including a telephone number of the mobile phone;
Communication means for transmitting information between a credit card member store terminal and a credit card company server;
Means for receiving, from the member store terminal, user identification data including a telephone number and statement data including a credit card number by the communication means,
Means for referring to and confirming the stored user identification data based on the received user identification data, and then transmitting the statement data to the credit card company server;
Means for receiving, from the credit card company server, credited data that is a result of executing a credit process in the credit card company server that has received the detailed data,
Means for transmitting the credited data to the member store terminal;
Means for receiving, from the member store terminal, sign-authenticated data and the credit card settlement frame data, which are the results of the collation performed by the sign authentication means on the mobile phone received by the member store terminal from the mobile phone. An authentication system, characterized in that: The mobile phone, after receiving the detailed data from the member store terminal that has received the credited data by the communication means for performing the short-range wireless communication, executes collation by the signature authentication means, and based on the execution result, The authentication system according to claim 5, wherein the signature authentication data and the credit card payment frame data updated based on the statement data are transmitted to the member store terminal. The authentication system according to any one of claims 4 to 6, wherein the center server further includes a signature data storage unit that stores signature data of the user in advance. For mobile phones,
A function of storing user's signature data in advance,
A function of inputting a user's signature and converting the signature into electronic data;
A program to be installed in a mobile phone, which realizes a signature authentication function for collating the previously stored signature data with the input and converted electronic data. 9. The program installed in a mobile phone according to claim 8, wherein the program further causes the mobile phone to perform a short-distance wireless communication with a credit card member store terminal. The program installed in a mobile phone according to claim 8, further causing the mobile phone to implement a function of storing credit card payment frame data. An authentication system having a center server that controls a mobile phone according to any one of claims 1 to 3, wherein:
A function of storing user identification data including a telephone number of the mobile phone;
A communication function for transmitting information between a credit card member store terminal and a credit card company server;
A function of receiving, from the member store terminal, user identification data including a telephone number and detailed data including a credit card number by the communication function,
After referring to and confirming the stored user identification data based on the received user identification data, a function of transmitting the detailed data to the mobile phone,
A function of receiving, from the mobile phone, signature-authenticated data that is a result of the collation performed by the signature authentication unit in the mobile phone that has received the detailed data,
A function of transmitting the statement data to the credit card company server after receiving the signature authenticated data,
A function of receiving, from the credit card company server, credited data that is a result of executing a credit process in the credit card company server that has received the detailed data,
A function of transmitting the credited data to the member store terminal and the mobile phone. The authentication system having a center server that controls a mobile phone according to claim 3, wherein:
A function of storing user identification data including a telephone number of the mobile phone;
A communication function for transmitting information between a credit card member store terminal and a credit card company server;
A function of receiving, from the member store terminal, user identification data including a telephone number and detailed data including a credit card number by the communication function,
After referring to and confirming the stored user identification data based on the received user identification data, a function of transmitting the statement data to the credit card company server,
A function of receiving, from the credit card company server, credited data that is a result of executing a credit process in the credit card company server that has received the detailed data,
A function of transmitting the credited data to the member store terminal;
The member store terminal realizes a function of receiving, from the member store terminal, sign-authenticated data and the credit card payment frame data, which are the results of the collation performed by the signature authentication unit on the mobile phone received from the mobile phone. An authentication program characterized by causing

Images